Privacy Policy

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name, email address, phone number, and job title
• Company/institution name and location
• Infrastructure and compliance assessment information
• Communications and correspondence with our team

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on our website
• Referring website or source

How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve our services
• To respond to your inquiries and requests for assessment
• To communicate with you about our services, updates, and compliance resources
• To analyze website usage and improve user experience
• To comply with legal obligations and industry regulations
• To protect against fraud, security breaches, and malicious activity

Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist us in providing services (e.g., email delivery, analytics, hosting)
• Business Partners: With your consent, we may share information with partners who provide complementary services
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with any merger, sale, or acquisition of all or part of our business

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest (TLS 1.2+, AES-256)
• Access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Secure hosting infrastructure with HIPAA-compliant data centers
• Employee training on data privacy and security

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request a copy of your information in a structured, machine-readable format

To exercise these rights, please contact us at [email protected].

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. You can control cookies through your browser settings. Note that disabling cookies may limit functionality of our website.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Massachusetts-Specific Rights

As a Massachusetts-based organization, we comply with Massachusetts data privacy law (201 CMR 17.00). Massachusetts residents have additional rights under state law, including:

• The right to receive notice of data breaches affecting personal information
• Protection of personal information through comprehensive security programs
• Encryption of personal information during transmission and storage

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: